Cross-Site Scripting Vulnerability in My WP Customize Plugin

CVE-2024-55864

What is CVE-2024-55864?

A critical cross-site scripting (XSS) vulnerability has been identified in the My WP Customize Admin/Frontend plugin for WordPress, affecting all versions prior to 1.24.1. This vulnerability allows a malicious administrative user to inject harmful scripts during customization of the admin page. If successfully executed, these scripts can run on the browsers of other users accessing the customized page, leading to potential compromise of user data and security. Website administrators using affected versions are strongly advised to update to version 1.24.1 or later to mitigate this risk.

References